Privacy Policy

Last Updated: January 29, 2026

1. Introduction

Welcome to Sales Automation ("Company," "we," "our," or "us").

We are committed to protecting your privacy and safeguarding your information. This Privacy Policy explains how we collect, use, disclose, process, and protect information when you use our website, platform, and related services (collectively, the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Data Controller and Data Processor Roles

Depending on the type of information processed, we act in different legal capacities:

Data Controller

When we collect account registration information, billing information, or website usage data, we act as a data controller.

Data Processor

When we process email data or contact information extracted from emails on your behalf, we act as a data processor. In these cases, you remain the data controller of that information.

We process such data only under your instructions and in accordance with our Terms of Service and any applicable Data Processing Agreement (DPA).

3. Information We Collect

A. Account Information

When you create an account, we collect:

  • First and last name
  • Email address
  • Phone number (if provided)
  • Company name (if provided)
  • Encrypted and hashed password

B. Email Data (Customer Data)

When you connect your email account via OAuth, we process email data to extract contact information. We collect and store:

  • Contact information from email signatures (e.g., names, titles, companies, phone numbers)
  • Email metadata (sender, recipient, date, message ID)
  • Encrypted OAuth tokens required to access your account

Important:

We do not store:

  • Full email body content
  • Email attachments
  • Personal conversations

Any email content processed for contact extraction or contextual drafting is processed transiently and discarded after processing.

C. Usage Information

We automatically collect:

  • IP address
  • Browser type and device information
  • Log data and access timestamps
  • Feature usage data
  • Error logs and performance metrics

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process personal data under the following lawful bases:

  • Performance of a contract
  • Legitimate business interests
  • Compliance with legal obligations
  • Your consent

5. How We Use Your Information

We use collected information to:

  • Provide and maintain the Service
  • Extract and organize contact data
  • Generate contextual outreach drafts
  • Synchronize data with CRM systems
  • Improve system performance and reliability
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

We do not use your data for advertising or resale purposes.

6. Google API Services Compliance

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We only access Gmail data to provide user-authorized features, and we do not use Google Workspace data for advertising, profiling, or resale.

7. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information.

We may share information only in the following circumstances:

A. Service Providers

We engage trusted third-party service providers to operate our business (such as hosting providers, monitoring services, infrastructure providers, and integration partners). These providers process data on our behalf under strict confidentiality and data protection agreements.

B. With Your Authorization

When you connect integrations (e.g., CRM systems), data is shared according to your instructions.

C. Legal Requirements

We may disclose information if required by law, regulation, court order, or legal process.

D. Business Transfers

If we undergo a merger, acquisition, or asset sale, user information may be transferred as part of that transaction.

8. International Data Transfers

Your information may be transferred to and processed in countries outside of your jurisdiction.

Where required, we implement appropriate safeguards such as Standard Contractual Clauses or other legally approved mechanisms to ensure adequate protection.

9. Data Security

We implement commercially reasonable and industry-standard security measures, including:

  • Encryption in transit (TLS 1.3)
  • Encryption at rest (AES-256)
  • Role-based access controls
  • Tenant isolation
  • Secure OAuth token storage
  • Two-factor authentication (2FA)
  • Regular monitoring and logging

While no system is 100% secure, we continuously improve safeguards to reduce risk.

10. Data Retention

We retain personal data:

  • For as long as your account remains active
  • As necessary to provide the Service
  • As required for legal, regulatory, or contractual obligations

Upon account deletion, we will delete or anonymize your data within a reasonable timeframe, except where retention is legally required.

11. Your Privacy Rights

Depending on your jurisdiction, you may have rights including:

  • Access to your personal data
  • Correction of inaccurate data
  • Deletion of personal data
  • Restriction of processing
  • Data portability
  • Objection to processing

To exercise your rights, contact us at support@yourdomain.com or via our Contact page.

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have the right to:

  • Know what personal information we collect
  • Request deletion of your information
  • Correct inaccurate information
  • Opt out of the sale of personal information

We do not sell personal information.

Requests can be submitted to: support@yourdomain.com

13. Data Breach Notification

In the event of a data breach affecting personal information, we will notify affected users and applicable authorities where required by law.

14. Children's Privacy

Our Service is not intended for individuals under 18. We do not knowingly collect personal information from children.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page and reflected in the "Last Updated" date.

16. Contact Us

If you have questions regarding this Privacy Policy or data practices, please contact:

Sales Automation

[Insert your business address]

support@yourdomain.com